Add spam machine

machines/spam/configuration.nix

@@ -0,0 +1,204 @@
+{ config, pkgs, lib, ... }:
+
+let
+
+    username = "cmrfrd";
+
+    emacs_overlay = import (builtins.fetchTarball {
+      url = https://github.com/nix-community/emacs-overlay/archive/master.tar.gz;
+      # url = https://github.com/nix-community/emacs-overlay/archive/57378ea2f62e9f450f420dc9d01cc06e0d3dd15e.tar.gz;
+    });
+    emac = import <nixpkgs> { overlays = [ emacs_overlay ]; };
+
+    nvidia-offload = pkgs.writeShellScriptBin "nvidia-offload" ''
+    export __NV_PRIME_RENDER_OFFLOAD=1
+    export __NV_PRIME_RENDER_OFFLOAD_PROVIDER=NVIDIA-G0
+    export __GLX_VENDOR_LIBRARY_NAME=nvidia
+    export __VK_LAYER_NV_optimus=NVIDIA_only
+    exec -a "$0" "$@"
+    '';
+
+in
+{
+  imports =
+    [ # Include the results of the hardware scan.
+      ./hardware-configuration.nix
+      ../../home-manager/nixos
+    ];
+
+  nix.settings.auto-optimise-store = true;
+  nixpkgs.config.allowUnfree = true;
+  nixpkgs.config.allowBroken = true;
+
+  # Use the systemd-boot EFI boot loader.
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  networking.hostName = "spam";
+  networking.networkmanager.enable = true;
+  networking.proxy.noProxy = "127.0.0.1,localhost";
+  networking.firewall.enable = true;
+  networking.extraHosts =
+    ''
+    127.0.0.1 *.localhost
+    127.0.0.1 home
+  '';
+
+  i18n.defaultLocale = "en_US.UTF-8";
+  console = {
+    font = "Lat2-Terminus16";
+    keyMap = "us";
+  };
+
+  # Set your time zone.
+  time.timeZone = "America/New_York";
+
+  # Enable the X11 windowing system.
+  # Base desktop manager, not default
+  services.xserver = {
+    enable = true;
+    updateDbusEnvironment = true;
+    libinput.enable = true;
+    desktopManager = {
+      xfce = {
+        enable = true;
+        noDesktop = true;
+      };
+      pantheon.enable = true;
+    };
+    windowManager = {
+      exwm = {
+        enable = true;
+        enableDefaultConfig = false;
+        extraPackages = epkgs: [
+				  epkgs.vterm
+        ];
+      };
+    };
+    displayManager = {
+      sessionCommands = "${pkgs.xorg.xhost}/bin/xhost +SI:localuser:$USER";
+      lightdm = {
+        enable = true;
+      };
+    };
+  };
+
+  boot.blacklistedKernelModules = [ "nouveau" "intel" ];
+  boot.kernelParams = [ "nouveau.modeset=0" ];
+  boot.kernelPackages = pkgs.linuxPackages_5_19;
+  services.xserver.videoDrivers = lib.mkDefault [ "nvidia"  ];
+  hardware.nvidia.package = config.boot.kernelPackages.nvidiaPackages.stable;
+  boot.plymouth.enable = false;
+  hardware.nvidia.nvidiaPersistenced = true;
+  hardware.nvidia = {
+    modesetting.enable = true;
+    prime = {
+      offload.enable = true;
+      intelBusId = "PCI:0:2:0";
+      nvidiaBusId = "PCI:1:0:0";
+    };
+  };
+
+  programs.thunar.plugins = with pkgs;[
+    xfce.thunar-archive-plugin
+    xfce.thunar-volman
+  ];
+  programs.mtr.enable = true;
+  programs.light.enable = true;
+
+  programs.fuse = {
+    userAllowOther = true;
+  };
+
+  # Enable sound.
+  sound.enable = true;
+  hardware.bluetooth.enable = true;
+  hardware.opengl.enable = true;
+  hardware.pulseaudio = {
+    enable = true;
+    package = pkgs.pulseaudioFull;
+    extraConfig = ''
+      load-module module-bluetooth-policy auto_switch=2
+    '';
+  };
+
+  # Logind don't close on lid switch
+  # services.logind.lidSwitch = "ignore";
+  services.logind.lidSwitch = "suspend";
+
+  #services.k3s = {
+  #  enable = true;
+  #  docker = true;
+  #  extraFlags = "--no-deploy local-storage --no-deploy traefik --no-deploy servicelb --no-deploy metrics-server";
+  #};
+  #systemd.services.k3s.after = [ "network-online.service" "firewall.service" ];
+  #systemd.services.k3s.serviceConfig.KillMode = lib.mkForce "control-group";
+  # systemd.services.k3s.serviceConfig = {
+  #   ExecStartPre = "-/sbin/modprobe br_netfilter overlay";
+  # };
+  #networking.firewall.extraCommands = ''
+  #  iptables -A INPUT -i cni+ -j ACCEPT
+  #'';
+
+  virtualisation = {
+    docker = {
+      enable = true;
+    };
+    podman = {
+      enable = true;
+    };
+    containers = {
+      enable = true;
+    };
+    libvirtd = {
+      enable = true;
+    };
+    cri-o = {
+      enable = true;
+    };
+  };
+
+  environment.systemPackages = with pkgs; [
+    nvidia-offload
+    ((emacsPackagesFor emac.emacsGcc).emacsWithPackages (epkgs: [
+      epkgs.vterm
+      epkgs.helm
+    ]))
+    pkgs.fuse3
+  ];
+
+  # Default user for machines
+  users.extraUsers.root.initialHashedPassword = "";
+  users.users."${username}" = {
+    isNormalUser = true;
+    extraGroups = [
+	    "wheel"
+      "libvirtd"
+	    "networkmanager"
+	    "audio"
+      "video"
+	    "tty"
+	    "dialout"
+      "docker"
+      "shadow"
+    ];
+    shell = pkgs.fish;
+  };
+  home-manager.users."${username}" = { pkgs, ... }: {
+    imports = [ ../../config/nixpkgs/home.nix ];
+  };
+
+  # Copy the NixOS configuration file and link it from the resulting system
+  # (/run/current-system/configuration.nix). This is useful in case you
+  # accidentally delete configuration.nix.
+  system.copySystemConfiguration = true;
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "22.05"; # Did you read the comment?
+
+}

machines/spam/hardware-configuration.nix

@@ -0,0 +1,39 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "xhci_pci" "thunderbolt" "vmd" "nvme" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/02508d2a-f713-4092-aea6-c57c8d54faea";
+      fsType = "ext4";
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/7CA5-B308";
+      fsType = "vfat";
+    };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-uuid/7f16fb01-cb68-43cd-81ce-31f825e2aff8"; }
+    ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlp0s20f3.useDHCP = lib.mkDefault true;
+
+  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}